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Ownership of 
Unix back 
in question 

BY JEFF FEINMAN 

The United States Court of 
Appeals overturned a U.S. Dis- 
trict Court decision that declared 
Novell the owner of the Unix and 
UnixWare copyrights. It is anoth- 
er chapter in an ongoing lawsuit 
against the SCO Group. 

The Aug. 25 decision, based on 
a close reading of the Unix asset 
purchase agreement between the 
two companies, sends the matter 
to another trial, this time in front 
of a jury. The appeals court did 
uphold a ruling that SCO owes 
Novell royalty payments. 

continued on page 23 ► 



Open Group tackles SOA 

Consortium devises maturity model, governance framework 



BY DAVID WORTHINGTON 

The Open Group has introduced 
a vendor-neutral maturity model 
for service-oriented architecture, 
as well as a framework to help 
organizations understand and 
deploy SOA governance. 

The Open Group is an indus- 
try consortium dedicated to the 
free flow of information across 
systems. It founded its SOA 
working group in 2005, and the 
working group's steering com- 
mittee has four members, two of 
which work for IBM. 

The Open Group Service 
Integration Maturity Model 
(OSIMM), released in August, 
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Open Group's SOA governance framework outlines a way for organizations to 
create processes and workflows. 



provides an extensible method to 
measure service adoption and 
integration and to create road 
maps for incremental transfor- 



mation to SOA to meet business 
objectives, according to The 
Open Group. 

OSIMM has seven levels of 



SOA majority, ranging from "not 
service-based" to SOA with 
dynamic service composition, 
explained Chris Harding, forum 
director for SOA and semantic 
interoperability at The Open 
Group. He works full time for 
The Open Group, and was previ- 
ously an independent consultant. 
An enterprise can develop its 
own maturity indicators, such as 
what kind of documents, meth- 
ods, services and tools must be 
employed, he added. 

"[OSIMM] is a way of assess- 
ing where you are, where you 
want to go, how you are going 
continued on page 23 ► 



Linux kernel contributions grow 



BY ALEX HANDY 

A new edition of a report track- 
ing contributions to the Linux 
kernel project has revealed that, 
even with the large size of the 
kernel, its rate of change is still 
increasing. 

"Who Writes Linux," the 
report put together by The Linux 
Foundation, showed that Red 
Hat remains the most prolific 
contributor to the kernel. 

Greg Kroah-Hartman, a fellow 
at Novell and the kernel develop- 
er who co-authored the report, 
said that the single largest group 
of contributors remains indepen- 
dent users. He said that more 
than one quarter of all code con- 



tributions come from unaffiliated 
individuals, or individuals who do 
not associate themselves and their 
contributions with any specific 
company. 

Kroah-Hartman spends most 
of his days helping companies 
build Linux drivers for their 
devices. He said that, overall, 
drivers made up about 55% of 
the Linux kernel contributions 
over the past year, which he also 
said is in line with how much of 
the kernel is made up by drivers. 

"Our rate of change is mas- 
sively increased. We all thought 
we were going really fast before," 
said Kroah-Hartman. "But we're 
continued on page 23 ► 




Greg Kroah-Hartman has helped to 
tabulate all of the code contributed 
to the Linux kernel since April 2008. 



Another deal shows Intel 
basing strategy on C++ 



BY JEFF FEINMAN 

With two recent acquisitions of 
language extensions, Intel is 
pushing C++ for parallel com- 
puting on multicore processors. 

The Cilk++ platform, pur- 
chased from Cilk Arts in early 
August, improves application 
performance on multicore 
processors with a set of C+ + 
extensions and a runtime system. 
The company followed that up 
three weeks later by acquiring 
RapidMind, which also helps 
scale applications running on 
multicore processors. 



James Reinders, director of 
marketing for Intel's software 
development products, explains 
that exploiting the power of its 
multicore processors is very 
much on Intel's mind. The com- 
pany has been promoting tools 
and practices for multicore 
development for some time, 
such as with the Intel Parallel 
Studio back in May. However, as 
Reinders admitted, parallel com- 
puting is "not one of those things 
you're ever done with." 

The work that Intel has done 
continued on page 23 ► 
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By next year, the average car will require over 100 million lines 
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OpenAjax Hub better secures mashups 

Inclusion of JavaScript library protects against hackers, malicious code 



BY JEFF FEINMAN 

The OpenAjax Alliance, an 
industry consortium focused on 
the adoption of AJAX-based 
Web technologies, has imple- 
mented new security features 
into its defined set of JavaScript 
functionalities. 

OpenAjax Hub 2.0, released 
in August, brings a JavaScript 
library for Secure Enterprise 
Mashups that organization 
executives said can better pro- 
tect widgets and mashups from 
hackers. The library isolates 
third-party widgets into secure 
sandboxes and manages mes- 
saging among the widgets with 
a security manager. 

For example, if a website 
includes a third-party calendar 
widget, the widget itself might 
become malicious if its code 
has vulnerabilities. Hub 2.0 can 
prevent attacks by isolating 
non-trusted widgets from an 
application and by preventing 



access to user credentials. 

"We looked at how to take 
enterprise data and create a 
mashup from it with data that 
could be coming from differ- 
ent domains outside of my 
secure area," said David 
Boloker, OpenAjax Alliance 
steering committee chairman 
and CTO of emerging Internet 
technologies for IBM. 

"That's why we implemented 
sandboxing, where my widget 
can't talk to any other widget 
unless I enable it. I might be 
able to get, for example, the data 
of all the accounts on my page, 
but no other widget, malicious 
or not, can get that same data 
unless I decide to enable them." 

Hub 2.0 also introduces a 
feature called Managed Hub, 
which allows the creation of 
both developer-built mashups 
and end-user-built mashups. 
Hub 1.0 only allowed for 
mashups built by developers. 



The Managed Hub ensures 
security by preventing sand- 
boxed components from 
accessing the JavaScript of the 
host application or other com- 
ponents. 

Hub 2.0 is available as both a 
specification and an open- 
source implementation. The 
Hub 2.0 specification was 
recently approved by OpenAjax 
Alliance members as an AJAX 
industry standard. The specifi- 
cation defines standardized 
JavaScript APIs for secure 
mashups to foster interoper- 
ability among mashups and 
mashup components. The 
open-source implementation is 
written in JavaScript and is 
compatible with all desktop 
browsers, according to Boloker. 

Other members of the 
OpenAjax Alliance include 
JackBe, Microsoft, RadWeb 
Technologies, Software AG 
and TIBCO. 




Hub 2.0's sandbox keeps widgets 
separated, says David Boloker. 

"OpenAjax Hub 2.0 is a very 
important advance for the 
industry," said Howard Wein- 
gram, principal architect for 
TIBCO Software. "For the first 
time, implementers can securely 
combine standardized widgets 
and components from different 
sources, including those with 
very different trust profiles." 



When asked how AJAX fits 
into the rich Internet applica- 
tion landscape with Adobe and 
Microsoft consistently updat- 
ing Flash and Silverlight, 
respectively, Boloker said the 
OpenAjax Alliance is solely 
focused on openness and 
interoperability of AJAX appli- 
cations. 

"We really don't per se wor- 
ry about how Silverlight 3.0 is 
going to interoperate with 
JavaScript. That's more of 
Microsoft's problem," he said. 
"It just so happens that both 
Adobe and Microsoft pretty 
much ensured that standard 
JavaScript will interface with 
Flash and Silverlight. But the 
OpenAjax Alliance is all about 
the open Web, making sure that 
all the widgets will work, and 
that if someone wants to create 
a Web page that has disparate 
widgets, we can make them 
communicate securely." I 



Sonar J 5.0 aims to clear cycles of dependencies 

Java architecture tool gives suggestions to fix code deviations 



BY ALEX HANDY 

Architecture violations are dan- 
gerous to projects. In August, 
hello2morrow Inc. released 
SonarJ 5.0, an architecture 
analysis tool that can identify 
sources of divergence by com- 
paring the proposed design of 
an application with the actual 
code being checked into repos- 
itories. 

Also new to version 5.0 are a 
host of visualizations for analyz- 
ing software metrics, added 
support for the Spring Frame- 
work as well as wide-ranging 
performance improvements. 

SonarJ allows Java applica- 
tion architects to build a dia- 
gram of how their application 
should work. SonarJ then takes 
the architectural schematic, as it 
were, and compares it to the 
actual code of the project as it is 
being built. Detecting deviance 
from the architecture is Sonar J's 
bread and butter. With version 
5.0, SonarJ can offer sugges- 
tions for fixing deviations within 
existing code. 

Alexander von Zitzewitz, 
CEO of hello2morrow, said that 
SonarJ 5.0 helps application 
architects maintain control over 
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SonarJ includes architectural description tools that allow developers to match conception against actual code. 



large projects. "We allow soft- 
ware engineers and architects 
to define the software in a high 
level of abstraction, then map 
that abstraction to the physical 
codebase and see if they 
match," he said. 

"Most of our customers are 
using SonarJ in an existing 
codebase. There are a lots of 



tangles and circular dependen- 
cies, and the structure [of these 
applications] has eroded over 
time, and they want to stop the 
bleeding." 

Also new to version 5.0, said 
von Zitzewitz, are additional 
capabilities around the cycle 
analyzer. SonarJ can now offer 
theoretical redistributions of 



dependencies for applications 
that would potentially reduce 
cyclicity 

"The cycle analyzer visual- 
izes all the dependencies, and 
then it calculates all the poten- 
tial breakup sets: Where do I 
need to cut dependencies to 
improve the overall structure? 
We try to find breakup sets 



that require the minimum 
amount of change and allow 
for maximum amount of sim- 
plicity. We had a cycle analyz- 
er before, but not the breakup 
and not the visualizer," said 
von Zitzewitz. 

SonarJ can also now handle 
much larger projects than pre- 
vious versions. Von Zitzewitz 
said it can handle applications 
that use more than 50,000 
classes. 

For projects with under 500 
classes, or around 20,000 lines 
of code, SonarJ is free. For larg- 
er endeavors, SonarJ costs 
US$1,000 for a single architect's 
license, and up to $9,000 for a 
multi-license pack. 

The free version of SonarJ 
can be had at the company's 
website. 

For the future, von Zitze- 
witz said that he hopes to add 
more refactorings to SonarJ. 
Currently, he said, the tool can 
perform a few refactorings, but 
the actual code changes are 
pushed to Eclipse to perform. 
He said he hoped the tool 
would offer more automated 
code cleaning capabilities in its 
next release. I 
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, COMPANIES , 



NVIDIA, a company specializing in visual computing, and Top- 
Coder, a software development competition coordinator, will host 
the CUDA Superhero Challenge, a contest for computer program- 
mers. The contest was expected to begin Sept. 14 and run until 
Sept. 25. According to NVIDIA, contestants will use its CUDA com- 
puting engine to try solve parallel processing challenges. For more 
details, visit www.topcoder.com/nvidia . . . Tuxera, a Finland-based 
company that develops NTFS drivers, has entered into a file-sys- 
tem IP agreement with Microsoft in the area of data portability for 
devices. The agreement gives Tuxera access to the exFAT (Extend- 
ed File Allocation Table) proprietary file system specifications and 
source code, as well as testing and verification software. 



NEW PRODUCTS 



Embedded software company MapuSoft Technologies has 
released Ada to C/C++ Changer, which allows developers to con- 
vert software written in Ada code to C/C++ utilizing the OS PAL 
(OS Porting and Abstraction Lab). The company also made avail- 
able Ada - PAL Compiler, which compiles Ada code and inte- 
grates with C/C++ compilers to generate binaries for multiple plat- 
forms . . . Perforce Software has released P4Java, a Java API for 
accessing Perforce's software configuration management services 
from within Java applications, servlets, plug-ins and other Java 
contexts. P4Java allows developers to integrate Perforce into 
Java builders such as Ant, CruiseControl and Maven, and in envi- 
ronments such as J2EE-based Web application and Web service 
frameworks . . . Idera, a provider of management and administra- 
tion offerings for Microsoft PowerShell, has announced a pack of 
more than 30 free PowerShell scripts for managing Active Direc- 
tory. The new scripts allow administrators to use Idera's Power- 
ShellPlus, a PowerShell IDE with a script editor and debugger, 
to automate tasks like editing password policies, enabling and 
disabling users and groups, and retrieving forest information 
. . . ThoughtWorks Studios, a maker of agile application life-cycle 
management software, has created ThoughtWorks Agile Work- 
shops, a set of training programs around coming up with proper 
business requirements for successful agile practices, team collab- 
oration and project management, proper testing, and continuous 
build and release management. 



UPDATES 



SOA Software has declared that its Repository Manager, Portfo- 
lio Manager, Policy Manager and Service Manager products have 
all achieved SAP certification for the SAP NetWeaver platform. 
This certification makes services exposed from applications run- 
ning on SAP visible to enterprise policies defined on other plat- 
forms . . . VMLogix has added capabilities for network policy con- 
figurations and deployment within IP zones across multiple virtual 
hosts in VMLogix LabManager 3.8, its flagship virtual machine 
manager. There is also integration with VMware's vSphere 4 visu- 
alization infrastructure and VMware vCenter Server, which was 
formally VMware VirtualCenter. 



PEOPLE 



EMC co-founder Richard Egan has died at the age of 73 after a 
battle with cancer. Egan served as EMC's CEO until 1992 and chair- 
man of the board until 2001. Upon his retirement from EMC, Egan 
served as U.S. Ambassador to Ireland. He is survived by his wife 
and five children . . . Michael Ernst, an assoiciate professor of 
computer science and engineering at the University of Washing- 
ton, has received the 2009 John Backus Award from IBM 
Research. IBM honored Ernst for his contributions to programmer 
productivity. Ernst specializes in program analysis and program- 
ming language design. This is the first time IBM has handed out 
the award, which honors university faculty members. The late 
John Backus created the Fortran programming language. I 



Microsoft exposes ADO.NET 
data to PHP applications 



BY DAVID WORTHINGTON 

Microsoft has funded an open- 
source project that will allow 
PHP developers to use 
ADO.NET Data Services, a 
feature of the .NET Frame- 
work that exposes data in a 
Representational State Trans- 
fer way. 

ADO .NET Data Services, 
formerly known as "Astoria," 
exposes data as a data service to 
be consumed by Web clients 
within corporate networks and 
across the Internet. 

It became a part of the 
.NET Framework when .NET 
3.5 Service Pack 1 shipped in 
August 2008. 

The project, which was 
dubbed "PHP Toolkit for ADO 
.NET Data Services," is hosted 
on Microsoft's CodePlex web- 
site and is available for down- 
load under a BSD license. The 
work was spearheaded by Per- 
sistent Systems and funded by 
Microsoft. 

The toolkit is written entire- 
ly in PHP and does not have 
dependency on the hosting 
operating system. It requires 
three standard PHP extensions: 
CURL, XML and XSL. 

It works by generating a 
PHP proxy file that contains 
class definitions based on the 
metadata exposed by 

ADO.NET Data Services, 
according to Microsoft. PHP 
client applications can use 



Logical architecture 
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PHP developers can access AD0.NET Data Services through a special PHP 
proxy file that is generated by the toolkit. 



those classes to access the data 
service. 

Pablo Castro, the software 
architect of ADO.NET Data 
Services, said that in order to 
create and consume ADO.NET 
Data Services using the .NET 
Framework, a developer can 
use any Visual Studio SKU, 
including the Express ones. 
The PHP toolkit is independent 
of the .NET framework and 
communicates with data ser- 
vices using just HTTP and 



XML (Atom) or JSON, so there 
are no dependencies on any 
Microsoft product to make the 
client end with PHP work. 

The toolkit offers basic 
authentication (username/pass- 
word); however, it includes a 
class that enables developers to 
use other authentication 
schemes, according to Micro- 
soft. The next release of the 
toolkit will have built-in 
authentication for Windows 
Azure. I 



Protecode manages IP in life cycle 



BY ALEX HANDY 

Protecode hopes to head off 
open-source license and organi- 
zational policy issues during the 
software development life cycle 
by offering the Forward Open 
Source Adoption (FOSA) work- 
flow, which enforces IP policies 
throughout the application life 
cycle. 

Mahshad Koohgoli, CEO 
and cofounder of Protecode, 
said that the FOSA workflow 
suite includes monitoring tools 
designed to funnel code to the 
company's core analysis plat- 
form. These monitoring tools 
cover developer desktops, build 
systems and repositories. As 
code is written, checked in and 
compiled, the analysis engine is 
called in to check over every 



line of code in an application. 

The analysis engine sits in 
the server at an organization 
and has the ability to analyze a 
file to detect its license and 
copyright information, said 
Koohgoli. "We have a huge 
database of code we've put 
together over the last two 
years," he said, adding that this 
database is used to compare 
code to that of the numerous 
open-source projects cataloged 
by Protecode. 

FOSA is priced based on 
the amount of analysis done, 
and Koohgoli said that an aver- 
age small business should 
expect to pay around US$5,000 
per year for the suite of scan- 
ning software. 

At the heart of FOSA is a 



user-defined policy that speci- 
fies what can or cannot be 
brought in to the code base, 
and the Protecode software 
enforces the policy. 

"You could define specific 
licenses that are or are not 
acceptable. You can define 
well-known open-source licens- 
es or proprietary licenses that 
you may not wish to use," said 
Koohgoli. 

Koohgoli said that policies 
can be built around various 
factors. Managers can forbid 
the use of specific licenses, or 
block code based on the copy- 
right holder, or create policies 
for code used internally versus 
widely distributed code. 

FOSA was made available in 
late August. I 
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IBM supports Open CM initiative in tools 



BY DAVID RUBINSTEIN 

IBM's Open Services for Lifecycle Col- 
laboration effort has resulted in specifi- 
cations for change management that the 
company has applied to four of its Ratio- 
nal products. 

The OSLC was created in June 2008 at 
the IBM Rational Software Development 
Conference, with the idea of describing 
application life-cycle resources and data, 
as well as common Web-based interfaces 
for sharing them, according to Scott 
Bosworth, OSLC program director at 
IBM. The first workgroup, tasked with 
change management, was formed in the 
November/December timeframe, and 
the OSLC CM 1.0 specification was fin- 
ished in June 2009. 

"We wanted to make life better for 
software delivery teams. The teams we 
work with have a range of tools they 
employ, and they struggle to make those 
tools work together," Bosworth said. 
"Tools have their own way of storing and 
representing data, and the integrations 
have been one-off and proprietary." 

The Eclipse Mylyn project, for exam- 
ple, has more than 30 integrations using 
proprietary APIs of third-party toolmak- 
ers. By creating a system where neces- 
sary resources are represented with a 
URL, tools can use basic HTTP and 
RESTful services to access those 



AN OPEN SERVICES APPROACH 



THE PROBLEM: Barriers to sharing 
resources and assets across the 
software life cycle 

• Multiple vendors, open-source 
projects, and in-house tools 

• Private vocabularies, formats 
and stores 

• Entanglement of tools with their data 

HOW IT WORKS 



THE SOLUTION: Open Services for 
Lifecycle Collaboration 

• Community Driven— specified at 
open-services.net 

• Specifications for ALM Interoperability 

• Inspired by Internet architecture 

• Loosely coupled integration with "just 
enough" standardization 

• Common resource formats and services 
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resources, Bosworth explained. 

"This will reduce cost and complexity 
for tool providers," he said. "Point-to- 
point integrations can be quite costly to 
do over and over and over again." 

OSLC CM 1.0 defines service- 
provider implementations for how to 
integrate with change management sys- 
tems in general, Bosworth said. A com- 
mon use case, he said, is integrating 



Source: IBM Rational 

quality management (test) tools with a 
change management system. 

"The tester runs his test case, and 
then wants to create a defect in the 
change management system. [OSLC 
implementations] let tools interact in a 
simple way for creating defects, retriev- 
ing them, searching for them [and] link- 
ing to them," he explained. "We're trying 
to build on the shoulders of the Web." 



Thus, Mylyn won't have to create indi- 
vidual integrations for task-based interfac- 
ing; instead, Mylyn would become a con- 
sumer of HTTP services to access the 
loosely coupled resources required for a 
particular project, Bosworth said. 

IBM supports the new specification in 
its Team Concert and ClearQuest prod- 
ucts, and Rational Change — the former 
Telelogic tool — will add support in a 
release this month. Also, the company 
said, IBM Rational Quality Manager uses 
OSLC interfaces to work with Team Con- 
cert, ClearQuest and Change, as do the 
Tasktop Technologies tools of IBM's busi- 
ness partner, which is behind Mylyn. 

Bosworth said there are more than 
120 individuals representing 20 organi- 
zations working on OSLC. 

Other OSLC workgroups are tackling 
tool integrations for requirements man- 
agement, quality management, software 
estimation, architecture management and 
asset management. Other groups, cover- 
ing reporting and software configuration 
management, are forming, Bosworth said. 

Integrations using commonly under- 
stood Web services open new possibilities 
to extend ALM into other processes and 
business markets, Bosworth said. "Now 
you can expose ALM data in a product 
life-cycle management scenario. HTTP 
and REST really simplify the process." I 



Staying profitable in tough times means that 

Everything should work together 



Here are three ways to take action right 
now to keep your head above water: 



1 Automate business processes to 
improve performance, gain financial 
advantages, and make the most of 
your staff. 

2 Streamline and monitor communica- 
tions with business partners and 
clients to improve cash flow and 
reduce processing errors. 




3 Improve data quality to increase 
performance, retain more customers, 
and enhance decision-making. 

iWay Software will get projects done 
quickly enough to satisfy even the 
most demanding, ROI-focused executive 
sponsors. Our software integrates 
every type of technology and is used 
by 70 percent of integration vendors 
to speed up their implementations 
and reduce risk. 



Get started by calling (866) 297-4929 
or visiting us on the Web at 
iwaysoftware.com/go/sdtimes. 
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SpringSource acquires Java PaaS company 



BY ALEX HANDY 

Only one week after it was 
acquired by VMware, Spring- 
Source is making acquisitions of 
its own. SpringSource, in 
August, acquired Cloud 
Foundry, a year-old Oakland- 
based startup focused on push- 
ing Java into the cloud. Cloud 
Foundry brings a new Java plat- 
form-as-a-service offering, 
which also entered its first pub- 
lic beta last month. 

A creation of Chris Richard- 
son, Cloud Foundry's primary 
product was manifested as a 
new application layer available 
within Amazons EC2 service. 
Dubbed SpringSource Cloud 
Foundry, the platform-as-a-ser- 
vice presents itself as a set of 
Amazon Machine Images that, 
when run within Amazon's 
cloud, can automate application 
scaling and failover across mul- 
tiple cloud-hosted machines. 

Richardson, who also creat- 
ed the Cloud Tools open-source 
project two years ago, said that 
Cloud Foundry offers more 
than just machine images. 

"We provide AM Is, but then 
there's also a Java-centric user 




Chris Richardson, founder of Cloud 
Foundry, will join SpringSource and 
head up its push into the clouds. 

experience," he said. "A Java 
developer goes to a nice Web- 
based UI and uploads their WAR 
files, [then] they click a button 
that says 'deploy' Then there's a 
monitoring and management 
component that's based on 
Hyperic and can automatically 
recover from failures. 

"Cloud Foundry can re- 
launch a database and reconfig- 
ure Apache Tomcat to talk to it. 
Also we have an auto- scaling 
capability as well, so that if app 



servers are overloaded it will 
load more." 

SpringSource Cloud Foundry 
will reach general availability 
early next year, said Rod John- 
son, CEO and founder of 
SpringSource. Eventually the 
product will be cloud-indepen- 
dent and will be offered for both 
commercial and internal clouds. 

Johnson said that, while 
Spring is a focus for this new 
cloud product, any Java applica- 
tion can be ported to the plat- 
form. "Developers can sign up, 
they can deploy applications in a 
matter of minutes, then they can 
deploy and manage Spring and 
Grails applications," he said. 

"They can deploy enterprise 
Java applications using the stan- 
dard WAR deployment unit. We 
certainly are very focused on the 
Spring community and on mak- 
ing it very easy for Spring devel- 
opers to deploy applications 
using Spring, but you can run a 
pretty broad range of enterprise 
Java applications." 

Of his company's plans for 
future acquisitions, Johnson 
stated that the Cloud Foundry 
purchase was already in motion 



before the VMware acquisition. 
He said this acquisition was 
entirely planned by Spring- 
Source, though he added that 
VMware approved of the move. 
"SpringSource has a pretty 
clear mission, which we've been 
executing on for the last eight 
months or so," said Johnson, 



"[The mission is] being the 
enterprise one-stop-shop for 
Java. As we go forward, we will 
broaden our footprint, and we 
wouldn't rule out further acqui- 
sitions." 

As Cloud Foundry was a pri- 
vate company, the purchase 
price of was not disclosed. I 



JBoss targets clouds 



BY ALEX HANDY 

When Red Hat kicked off JBoss 
World in Chicago, the big news 
focused on a renewed focus on 
the cloud for JBoss middleware. 
Red Hat announced the avail- 
ability of the JBoss Enterprise 
Application Platform 5.0. The 
platform will be made available 
inside Amazon's Elastic Com- 
pute Cloud, and it includes an 
entire set of Java tools, such as 
Hibernate, Seam and the JBoss 
Application Server. 

Craig Muzilla, vice president 
of middleware at Red Hat, said, 
"Not only have we delivered on 
our JBoss Open Choice strategy 
by releasing JBoss Enterprise 
Application Platform 5.0, but 



we are contributing to the 
future of Java application plat- 
forms, from traditional to 
cloud-based environments. 
Ultimately, we aim to give cus- 
tomers the flexibility to choose 
the right programming and 
deployment models to stay 
ahead of their competition." 

Developers looking to build 
on top of the JBoss Enterprise 
Application Platform 5.0 can 
use the Eclipse-based JBoss 
Developer Studio, which inte- 
grates with the JBoss middle- 
ware stack, as well as the JBoss 
Application Server. 

Over the long term, Red Hat 
plans to expand its software to 
additional cloud services. I 



Easy-to-implement Software Licensing that 
protects the end-user experience 



The modern licensing solution of choice for over 1000 software developers 
of all sizes, including Reuters, Symantec, Asyst and Texas Instruments 



The Nalpeiron Licensing Service™ lets 
you add secure, flexible licensing to 
the software you write. Helping you 
grow your software business using 
modern software licensing tools that 
increase customer satisfaction, reduce 
costs and drive revenues. 

Experience the on-demand licensing 
service, with low up-front costs and a 
pay-as-you-go licensing model. 
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Secure API-based software licensing and copy protection 
Simple, easy and fast to deploy (hosted or on premise) 
Hosted service - free updates, support and maintenance 
Platform agnostic - protects Windows (x86 & x64) and Mac 
Easy integration with your own systems (inc. web services) 
Maximize revenues - with the ActiveMarketing plug-in suite 
Reduce costs - with lower manpower and capital requirements 
Fast implementation - get up and running in 24 hours 



www.nalpeiron.com/stfreetrial 

Test your application in a live environment and review the 
whole process from setup to integration in just a few hours 

1-888-800-8818 



Since adding the Nalpeiron 
protection we have experienced a 
15% growth in international 
markets, 8-10% of which we 
attribute to having the Nalpeiron 
protection in place. 
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CollabNet pushes community best practices 



BY ALEX HANDY 

It's hard not to be jealous of 
some open-source projects. 
Endeavors such as the Linux 
kernel and the Eclipse project 
channel the work of thousands of 
hands into a singular, effective 
ecosystem of software. Collab- 
Net hopes to push the power of 
such software communities into 
the hands of its corporate clients. 

CollabNet announced in 
August that it will offer free one- 
hour audits of existing commu- 
nities, and has made available 
the Enterprise Community 
Management Cook Book, enu- 
merating the best practices for 
managing open-source projects. 
For companies seeking an even 
deeper engagement, CollabNet 
also announced both an advisory 
and a management service for 
corporate communities in need 
of a shepherd. 

Mike Bellissimo, vice presi- 
dent of worldwide services at 
CollabNet, said that these new 
services are targeted at compa- 

CODERUSH TOOL 
OPTIMIZED FOR 
LARGE PROJECTS 

BY DAVID WORTHINGTON 

A new version of Developer 
Express' Code Rush .NET pro- 
ductivity add-on for Visual Stu- 
dio is optimized for large pro- 
jects and reduces memory 
consumption, the company says. 

CodeRush v2009 vol 2 
became available in August. It 
allows developers to create code 
blocks for reuse in their applica- 
tions, and to extend and create 
custom code templates. It also 
offers code navigation shortcuts 
and visualization tools. 

CodeRush is priced at 
US$249.99 without full source 
code, said Kevin White, Dev- 
Express' director of marketing. 

A new symbol cache, which 
is built when a solution is first 
opened, speeds up subsequent 
parsing by up to 500%, making 
code more readily available for 
refactoring, the company said. 

DevExpress also shrunk 
CodeRush's memory consump- 
tion by having it only load cached 
project symbols as needed; sym- 
bols not recently accessed are 
released from memory. On large 
projects, customers can expect 
reductions in overall memory 
consumption by 100-200MB, 
the company says. I 



nies that have grown to admire 
open-source practices. "Enter- 
prises are telling us they want to 
learn what open source has 
learned about governance, 
standards and taxonomies. Our 
typical customer would be an 



enterprise customer that wants 
to embrace their external devel- 
opment community and link it 
to their internal development 
community," he said. 

The Enterprise Community 
Management Cook Book focus- 



es on numerous aspects of com- 
munity-based software develop- 
ment, including code migration, 
application life-cycle manage- 
ment, and metrics. 

Suggestions included in the 
Cook Book for building a healthy 



community discuss everything 
from project scheduling to tool 
selection. Specifically, the Cook 
Book, which is hosted on a wiki, 
recommends allowing develop- 
ers to use their own tools. It also 
suggests allowing outsiders to ask 
questions, and promoting, or 
even hiring, the most prolific 
contributors. I 
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The Fastest Way to Build Native Windows Applications 
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Fabricio Pontes ote Araujo 
IBS - Info Business Solutions 



Peter Hyde, Development Director 
YVebcentre Ltd. 






hi 
UfOft 



IF 



j ^ 04T<3iAP 

- t^ FBCDKfECTlOH 
T d^ 

r % rrratot 
£ ft knaxra 



Touch/Gesture- En able Your Apps with Ease -cutting-edge 
capabilities to touch -and gesture -enable your applications for 
Windows* 2000. XR Vista, and Windows" 7 



Connect to More Databases and Tiers - high-speed data access 
drivers for Oracle, Microsoft* SQL Server, IBM* DB2*i Sybase*, 
InterBase^ MySQL® Firebird, and mors 



Lj>'iriiirii'nh 

"jj I l#l'PliiftWh 



Fast AppS Faster -over 120 productivity anhancemerrts including IDE 
Insight code formatter, C++ class explorer, new multi-thread debugger, 
background compilation, and much more 



Windows 7 Ready - Windows 7 APf T Direct2D, muJti-touch T and more 



Get Free Trials 

www. em barcadero . com 



Working with Java". PHP, Web applications, or databases? 

Embarcadero can help. With state-of-the-art tools like JBmtaer*, J Optimizer, Delphi lor PHP, 
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Pentaho aims to ease embedding 



BY DAVID WORTHINGTON 

Open-source software maker 
Pentaho has distributed a new 
version of its business intelli- 
gence suite that makes it easier 
for developers to embed applica- 
tions, according to the company. 

Pentaho BI Suite Version 3.5, 
released in August, has an updat- 
ed report designer that uses a 
unified file format that contains 
resources and components 
required to render reports. 

"It provides a standard 
process for formatting reports. 
It can be done without switch- 
ing between interfaces," said 
Lance Walter, senior vice presi- 
dent of marketing. The report- 
ing capability can be integrated 
into business applications 
because it is delivered as a set 
of Java libraries, he added. 

Organizations that want to 
integrate business intelligence 
functionality into their applica- 
tions without building out 
reporting capabilities can just 
"plug in" the libraries, he said. 
The libraries are available under 
the GNU Lesser General Public 
License, which does not have a 
reciprocal distribution provision. 
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Pentaho allows end users to self-service, creating their own BI content. 
Developers may embed that capability into their own applications. 



The suite also has new self- 
service capabilities to allow end 
users to create charts and other 
business intelligence content for 
their dashboards. A chart design- 
er lets end users pick chart types 
and lay out fields from business 
categories without worrying 
about SQL, said product market- 
ing manager Jared Cornelius. 

A data grid component can 
be populated with query results, 
restyled and sorted by end users. 

The company is offering two 
new programs for developers to 



embed its software with: a sup- 
port service called Pentaho 
Reporting Embedded Edition, 
and a regiment that grants users 
unlimited, royalty free use of 
Pentaho for US$10,000, without 
per-user or per-CPU fees. The 
guidance and support service fol- 
lows the same pricing. 

Pentahos flat-rate "Escape" 
program offers conversion from 
Actuate e. Reports, Brio, Cognos 
Impromptu, Crystal Reports and 
Oracle Reports, according to the 
company. I 



Rackspace courts 
cloud developers 



BY ALEX HANDY 

Rackspace Hosting is hoping to 
woo cloud developers away from 
Amazon by creating an open 
marketplace for cloud tools 
hosted within the confines of 
Rackspace s own cloud services. 

Rather than flesh out its own 
set of APIs, Rackspace is court- 
ing third-party cloud companies 
to build tools for the Rackspace 
cloud. Companies like Cloud- 
kick, RightScale and SOASTA 
now offer a variety of third-party 
tools in Cloud Tools, Rackspace s 
service for moving virtual 
machines, testing cloud applica- 
tions, and scaling server loads 
into Rackspace. Cloud Tools 
gives Rackspace a more com- 
pelling story for developers, said 
Jim Curry, Rackspace s vice pres- 
ident of corporate development. 

"We launched in March 
without any APIs," he said. "We 
launched our APIs in July, and 
we've been getting feedback on 
our APIs. We've been asking, 
'What does Amazon do well, 
and what don't they do well?' " 

Curry said that Rackspace 



hopes to work more closely with 
third-party cloud tool developers 
than Amazon does. He cited 
Amazon's introduction of its 
Elastic Compute Cloud for scal- 
ing, which quickly trumped 
existing third-party offerings. 
Specifically, he said that scaling 
products from RightScale were 
superceded without warning by 
Amazon's own APIs. 

Tom Lounibos, CEO of 
SOASTA, said that his company 
works with both Amazon and 
Rackspace. His company's Cloud 
Test service is available within 
Cloud Tools, and he said that 
Rackspace's new APIs were 
quick and easy to learn. 

"We've been doing this for a 
few years, but this marketplace 
needs more than Amazon, and I 
think Rackspace is stepping up," 
said Lounibos. "One of the 
strengths around Amazon was 
building a community around 
them." 

Curry said that the developer 
community is a focus for Cloud 
Tools, and that developers can 
rate available tools on the site. I 
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Control Network Licensing 
Control concurrent users 
Control "roaming" users 
Create "Standby" Licenses 
Hot Standby and Cold Standby 
Provide Overflow Licenses 

Pay-Per-Use Counter 
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DevSpec 

Wiki-powered requirements management 



Implementing a requirements management solution can be challenging if its not intuitive and easy to use. 
Experience the DevSpec difference: 



• DevSpec "s Wiki interface makes adoption easy 
Powerful 

• Fully-definable graphic workflow 

• Completely customizable user interface 



Integrated with OevTrack for requirement -driven development 
Integrated with DevTest for requirement-driven testing 

Integrated with Community so your customers arc part of 



jut requirements team 
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GatherSpace: The focus is requirements 



BY JEFF FEINMAN 

GatherSpace is trying to bring 
an organic touch to require- 
ments management with its on- 
demand, requirements-only 
approach. 



GatherSpace 2.0, released in 
August, lets users manage a 
product feature backlog by rank- 
ing business and software 
requirements. Requirements 
that are less of a priority can be 



merged into a specific backlog 
or iteration, according to compa- 
ny executives, as higher priority 
requirements are carried out. 

A new use-case visualization 
modeler provides high-level 



diagrams of how use cases will 
be used in a project. The new 
version utilizes Adobe Flash 
technology to render these dia- 
grams. 

GatherSpace 2.0 lets devel- 
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by not choosing Aspose? 



Spare yourself some pain; 
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XLSX CSV 
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SWF & More. 



The ever expanding list of features now includes the ability to Read, Write, Convert, Print, View, and Render for 
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opers import requirements to 
work on them offline, or export 
requirements into CSV (com- 
ma-separated value) and XML 
formats. This can be used to 
make data available outside of 
GatherSpace, company execu- 
tives said. 

There are also new AJAX 
capabilities that can bring up 
windows of information on 
requirements as they are being 
organized and managed. 

"We're rolling out more and 
more AJAX functionality, so our 
interface behaves more like a 
desktop client as opposed to a 
Web client," said Darren Levy, 
founder of GatherSpace. 

Levy's main reasoning as to 
why GatherSpace is unique 
from requirements managers 
from other companies, includ- 
ing Blueprint and IBM, is that 
it focuses on requirements 
management in an "un-bloat- 
ed" fashion. 

"Most larger companies 
started with a software develop- 
ment cycle, but not require- 
ments management. They 
backed into it," Levy said. "We 
are an organic requirements 
company. We want to be one of 
the best on-demand require- 
ments management tools. We 
provide just about everything 
you need for requirements 
management, but we don't pro- 
vide the full software develop- 
ment life cycle." 

Levy made the point that 
GatherSpace is a cheaper alter- 
native to its competitors, as a 
12-month subscription costs 
US$15 per user per month. 

Levy also said GatherSpace 
can offer a specific configura- 
tion or report that a customer 
wants to implement. A feature 
called "Report a Bug" lets 
users submit bugs or change 
requests, so the company will 
review them and make the 
changes. 

"We eat our own dog food, 
so we use GatherSpace to man- 
age our own backlog," Levy 
said. "[A reported bug] goes 
into a queue, and we look at the 
queue every day and decide if 
there are themes to what peo- 
ple are asking. As we see 
requests that come in that 
we've seen before, we'll turn 
changes around very quick." 

GatherSpace was founded in 
2005 and has seven employees. 
The company is based in Los 
Angeles. I 
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Easily create richly formatted Excel reports without Excel using the 
new generation of spreadsheet technology built from the ground up 
for scalability and reliability. 



Excel Compatible Windows Forms Control 

Add powerful Excel compatible viewing, editing, formatting, calculating, 
charting and printing to your Windows Forms applications with the easy 
to use WorkbookView control. 



rom Excel Charts and Ranges 

You and your users can design dashboards, reports, charts, and 
models in Excel rather than hard to learn developer tools and you can 
easily deploy them with one line of code. 



Download the FREE fully functional 30-Day 
evaluation of SpreadsheetGear 2009 today at 



www.SpreadsheetGear.com. 
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SharePoint Comes Back 
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SPTechCon 

The SharePoint 
Technology Conference 



Feb. 10-12, 2010 -> San Francisco 




After successful sold-out events in 
San Francisco and Boston this year, 
the SharePoint Technology conference 
returns to San Francisco in 2010. 
Reserve your place at the biggest 
independent SharePoint conference 
of the year! 



SPTechCon features more than 
70 classes and workshops to 
teach how to take full advantage 
of SharePoint, from content 
management to search to 
backup and much more! 
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■ New to SharePoint? 
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master SharePoint? 
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For more information, go to 

www.sptechcon.com 




San Francisco 



February 10-12, 2010 • San Francisco, CA 

Hyatt Regency San Francisco 



"Excellent instructors and great course selection. 
This is a must-attend." 

Bob Walter, Systems Administrator, Porter Novelli 

"Awesome coverage of SharePoint. SPTechCon is a great 
place to learn and network with SharePoint Gurus." 

Devendra More, Associate Business Systems Analyst, CA Inc. 

"The conference was worth the price, and I would 
attend again." 

Jon Gebarowski, Web Development Manager, SeaChange Int'l 

"Lots of good stuff for various levels of SharePoint folks." 

Joel Dylhoff, Systems Architect, Ashley Furniture 



SPECIAL 
KEYNOTES 





Ted Pattison 

Co-founder, 
Critical PathTraining 



Tom Rizzo 

Director of SharePoint, 
Microsoft 




A BZ Media Event 



DIAMOND SPONSOR 




AAvePoint 



GOLD SPONSORS 

fpweb«nef 

MIMOSA- 
systems 



SILVER SPONSOR 

£) software 



18 



NEWS 



Software Development Times . September 15, 2009 . 



www.sdtimes.com 



Active Endpoints makes 
Ul creation automatic 



BY DAVID WORTHINGTON 

Active Endpoints, a business 
process management and 
automation software maker, has 
introduced an automated form 
designer that it says will accel- 
erate process application design 
in its Active VOS visual orches- 
tration software. 

ActiveVOS 7.0, expected to 
ship on Sept. 15, includes a form 
designer that can read Web Ser- 
vices Description Language, 
making the form a service end- 
point. "This direct link elimi- 
nates the need for things like JSP 
coding to access services," 
explained the company's director 
of marketing Sonal Rajan. 

The forms are AJAX-based 
and can be deployed to process 
participants via a URL to initiate 
those processes, said Alex Nei- 
haus, vice president of marketing 
for Active Endpoints. 

ActiveVOS includes a role- 
based workplace application 
called ActiveVOS Central for 
developers, users and operation 
staff. It uses WS- Human Task, a 



standard formed to execute 
processes that deal with people, 
to initiate and manage work- 
flows with human-focused tasks. 

"Until ActiveVOS 7.0, you 
had to create a form of some 
kind, then link that form to a 
database or some process using 
Java Server Pages or an alterna- 
tive... Then you thought about 
how you'd call a database or 
some other application to inter- 
act with that form," Rajan 
explained. 

"In the ActiveVOS 7.0 forms 
designer, you will have a list of 
all available services right there 
in the designer... That service 
could be calling 50 databases 
across a network, performing 
all kinds of work... You don't 
know or care..." 

Pricing for development 
servers is US$15,000 for a first- 
time CPU socket license, said 
Neihaus. Customers may pur- 
chase additional licenses later for 
$28,000 per CPU socket. 

Beyond form generation, 
ActiveVOS 7.0 leverages an early 
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BPMN 2.0 notation allows business analysts and developers to collaborate 
in developing a business process model that can be directly executed on a 
BPEL 2.0 engine. Previously, ActiveVOS relied solely on BPEL4PE0PLE. 



implementation of Business 
Process Modeling Notation 
(BPMN) 2.0, which is a draft 
specification from the Object 
Management Group that 
enables developers and business 
analysts to collaborate on process 
design and implementation. 



With BPMN 2.0, BPMN 
business process models can 
combine human and system 
tasks. Prior to the inclusion of 
BPMN 2.0, ActiveVOS relied 
solely upon BPEL4PEOPLE to 
recognize and work with human- 
focused tasks. I 



EBAY MAKES 
THIRD-PARTY 
APPS PUBLIC 

BY DAVID RUBINSTEIN 

eBay has released roughly a 
dozen third-party applications 
to subscribers of its Selling 
Manager and Selling Manager 
Pro application platform, look- 
ing to enhance the user experi- 
ence at the e-commerce site. 
This move marks the first time 
eBay has made any of the 
13,000 applications created for 
itself widely available to its 
subscriber base. 

Among the first applica- 
tions for release are a market 
research application from Ter- 
apeak that helps buyers and 
sellers understand the market 
they are in, and a messaging 
and alerting application from 
ahTEXT that notifies sellers 
about offers or questions from 
buyers. 

In the eight-and-a-half years 
of the eBay developer program, 
"a tremendous amount of third- 
party applications have been cre- 
ated," said Kumar Kandaswamy, 
who leads the program. I 
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♦ 25+ full-text and fielded data 
search options (with Unicode 
support for hundreds of 
international languages) 

♦ Built-in file parsers / converters 
highlight hits in popular file types 

♦ Spider supports static and 
dynamic web data; highlights 
hits with links , formatting and 

Jimages intact 

♦ API supports .NET, C++, Java, SQL, 
etc. .NET Spider API 
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Text Retrieval® since 1991 

"Bottom line: dtSearch manages a 
terabyte of text in a single index 
and returns results in less than a 
second" — Info World 

dtSearch "covers all data sources 
... powerful Web-based engines" 
— eWEEK 

"Lightning fast ... performance 
was unmatched by any other 
product" — Redmond Magazine 

See www.dtsearch.com for 
hundreds more reviews, and 
hundreds of developer case 
studies 



1-800- IT-FINDS • www.dtsearch.com 



CRYSTAL REPORTS 



ft verte s \ 

/ / ] 



LI 






CRYSTAL REPORTS 
IT JUST WORKS 



A LEADER IN REPORTING 




THAT WORKS 



ith Java or .NET, access virtually any 
database, and publish to the Web with support for Firefox, 
Safari, and Internet Explorer. 



WITH THE LATEST INNOVATIONS 



ps, manage 
dashboards and reports on a single server, and share 
interactive reports afford ably via new licensing options. 



DRIVE IT TODAY: 



rystalreports/dev 
or contact us at 1-888-333-6007 



1996 to 2008 



20 



NEWS 



Software Development Times . September 15, 2009 . 



www.sdtimes.com 



Cache 2009 adds security, reporting 



BY DAVID WORTHINGTON 

InterSystems has delivered 
Cache 2009, adding integrated 
Web services security and 
reporting to the database. 

Cache 2009, released in 



August, is an object relational 
database that allows developers 
to view the contents of tables as 
objects. Data can be accessed as 
objects from Java and .NET lan- 
guages without SQL statements. 



InterSystems integrated a 
compliant version of the WS- 
Security 1.1 standard into Cache 
so that developers can make 
security less complicated for cus- 
tomers, said Paul Grabscheid, 



the company's vice president of 
strategic planning. "There is not 
always [standards] consistency 
from one vendor to another." 

Developers can now imple- 
ment security features for Web 
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services, including digital signa- 
tures, key encryption, creation 
of X.509 certificates, and Secu- 
rity Assertion Markup Lan- 
guage assertion tokens. 

In another first for the prod- 
uct, Cache 2009 has built-in 
reporting. Reports can be gen- 
erated in HTML, PDF and 
PostScript formats, and can be 
printed out and accessed 
through the Web. 

In addition, new system man- 
agement features are available 
to make it easier for customers 
to manage large, complex con- 
figurations, he said. "It's more 
easy to roll out changes across a 
number of systems." I 

OutSystems' free 
agile platform 
focuses on .NET 

BY DAVID RUBINSTEIN 

Agile platform provider OutSys- 
tems has released a free com- 
munity edition of its platform 
focused on the .NET environ- 
ment, the company announced. 

Released in August, this ver- 
sion has the same features and 
running code as the commercial 
editions, but it is limited to five 
concurrent uses of deployed 
applications and 75,000 "soft- 
ware units" — described by mar- 
keting vice president Mike 
Jones as 60 database tables and 
150 pages. 

"We had a free version in 
the past, then went to a trial 
version, but developers didn't 
like it because they knew the 
next call they'd get was from 
a sales person, or the trial 
period would expire before 
they could even finish any- 
thing useful," Jones said. 
With the new release, Out- 
Systems is hoping to develop 
a community of users around 
the product. 

The platform itself encom- 
passes a development environ- 
ment, the ability to integrate 
with other tools, and a built-in 
deployment mechanism for 
configuration management, as 
well as a management console 
that can be used to provision 
additional servers for load bal- 
ancing and for the generation of 
analytics, Jones said. 

OutSystems' Agile Platform 
also comes with scoping and 
sizing tools for project manage- 
ment, as well as what Jones 
called "embedded change man- 
agement," which allows users to 
submit feedback about a run- 
ning, deployed application. I 
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Introducing Folder Diff, 

a productivity feature of Perforce SCM. 

Folder Diff is an interactive, side -by- side display for comparing ihe state of 
any two groups of files. 

Use Folder Diff to quickly determine the differences between fifes in folders, 
branches, labels,, or your local disk. This is especially useful when 
performing complex code merges. 

And when you've been working offline, Folder Diff makes it a snap to 
reconcile and catch up with the Perforce Server when you get hack online. 

Folder Diff is jusl one of rhe many productivity tools rhctr come with The 
Perforce SCM System. 
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Download a free copy of Perforce, no questions 

asked, from www.perforce.com. Free technical support is 
available throughout your evaluation. 
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with knowledge and skills that 
you can put to work immediately. 
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how to build better software, 
faster and more effectively. 



Why ESDC is the ONE conference 
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terprise software development. 
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development methodologies, 
including traditional methods and 
the fast-evolving world of agile de- 
velopment, so you can see what's 
best for your organization. 



B Every workshop and technical 
class you'll attend at ESDC is 
tied to real-world enterprise 
development - techniques that 
are proven to work today. 

B You'll walk away with ideas, 
skills and knowledge that you 
can apply immediately - no matter 
your development methodology. 
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Linux kernel continues 
to grow; Red Hat leads 



< continued from page 1 

adding more code than we were 
before." 

Kroah-Hartman said that 
the kernel averaged around 
10,923 lines of code added 
every day since April 2008. 
There are also around 5,000 
lines of code removed and 
almost 2,000 lines changed, dai- 
ly. The most recent version of 
the kernel (2.6.30) is made up 
of 11,560,971 lines of code con- 
tributed by around 1,600 devel- 
opers, according to the report. 

"When we were half that 
number, we still were the 
largest open-source project in 
the world. That's the part that's 
scary," said Kroah-Hartman. 

Many of those code changes 
came from Intel, which grew its 
number of contributions drasti- 
cally over the past year. While 
Intel barely registered on the 
survey last year, this year the 
company accounted for 5.3% of 
total code contributions. 

Another growth area for Lin- 
ux in the past year has been in 
the embedded space. Embed- 
ded companies Analog Devices, 
Freescale and MontaVista each 
contributed around 1% of the 
overall code in the past year. 

The "Who Writes Linux" 
report is available for free at the 
project's website. I 



LINUX KERNEL DEVELOPMENT 



The top 10 contributors, 
make up nearly 70% of 



including the groups "unknown" and "none" 
the total contributions to the kernel. 



Company Name 


No. 


of Changes 


Percent of Total 


None 




26,644 


18.2% 


Red Hat 




17,981 


12.3% 


Unknown 




11,164 


7.6% 


IBM 




11,151 


7.6% 


Novell 




11,046 


7.6% 


Intel 




7,782 


5.3% 


Consultants 




3,657 


2.5% 


Oracle 




3,513 


2.4% 


Linux Foundation 




2,345 


1.6% 


SGI 




2,317 


1.6% 


Parallels 




1,939 


1.3% 


Renesas Technology 




1,925 


1.3% 


Academia 




1,712 


1.2% 


Fujitsu 




1,592 


1 .1 % 


MontaVista 




1,564 


1.1% 



MIPS Technologies 
Analog Devices 
Hewlett-Packard 
All others combined 



1,537 
1,467 
1,415 
11,719 



1.1% 
1.0% 
1.0% 
8.1% 

Source: Linux Foundation 



The chart below shows that with each version of Linux, the number 
of changes per hour grew steadily. 
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OpenGroup offers maturity model 



< continued from page 1 

to get there, and how long it 
will take," Harding said. It is 
similar to models that software 
consultants use to establish 
what a client needs and what 
they can deliver to fulfill that 
need, he said. 

However, OSIMM allows 
enterprises to make that assess- 
ment without becoming tied to 
a vendor solution, Harding said. 
It can also help developers that 
have been experimenting with 
SOA justify a greater use of 
SOA. "There are weighted indi- 
cators, assessment questions, 
and practices and experience 
behind it," he said. 

Jason Bloomberg, managing 
partner at analysis firm Zap- 
Think, said many SOA maturity 
models come from software ven- 
dors and are little more than 
software sales tools. "The Open 



Group Service Integration 
Maturity Model was in large part 
contributed by IBM," he pointed 
out, "but The Open Group has 
done a good job evolving it to be 
a useful, vendor-neutral tool. 
The ones from consulting orga- 
nizations to be better aligned 
with enterprise needs." 

SOA governance is another 
"wooly subject" for enterprises, 
Harding said. "There is not a lot 
of consensus about what it 
means, and there is a fuzzy line 
between governance and man- 
agement." 

The Open Group believes 
that SOA governance is about 
how an organization s processes 
work, and that the value of gov- 
ernance is that it helps an orga- 
nization build the right services 
and solutions to enable service 
reuse, he explained. It also 
helps organizations deploy and 



manage services effectively, and 
to "maintain alignment with 
business needs," Harding said. 

The Open Group SOA Gov- 
ernance Framework defines a 
set of processes for developing, 
deploying and operating ser- 
vices. The framework also identi- 
fies SOA-specific processes, and 
it describes how they fit into gov- 
ernance as a whole, he said. 

It offers a reference model 
with starting points, check- 
points and procedures to "make 
sure things are done right," 
Harding explained. He said that 
organizations could take some 
procedures out as they gain 
experience. 

The Open Group's work is 
not limited to SOA adoption 
and governance. It is producing 
guides for using SOA, legacy 
evolution to SOA, and SOA 
security, Harding said. I 



Unix in dispute again 



< continued from page 1 

"Novell's arguments do not 
convince us that the admissible 
evidence concerning the ambig- 
uous contract language concern- 
ing contract ownership is so one- 
sided as to warrant summary 
judgment," the court wrote in a 
55-page ruling. "Because we 
conclude summary judgment is 
inappropriate on the question of 
which party owns the Unix and 
UnixWare copyrights, we must 
likewise reverse the district 
court's determination." 

While this may be a court- 
room victory for SCO, the 
company is still in financial dif- 
ficulty. A bankruptcy judge 
blocked SCO's motion to sell 
off most of its products to an 
investment group called unXis, 
and the judge appointed a 
Chapter 11 trustee to oversee 
the company's assets. 

A source with intimate 
knowledge of SCO said the 
appellate reversal reinstates the 



companys claims in pending 
Unix lawsuits against IBM and 
Red Hat, but SCO still has to 
deal with its bankruptcy issues 
before seeking a trial date. 

All parties involved in the 
case have been ordered not to 
comment. 

The long-running case is 
over the true ownership of Unix 
and UnixWare technology fol- 
lowing Novell's sale of part of its 
Unix business to SCO's prede- 
cessor, Santa Cruz Organiza- 
tion, in 1995. The lawsuit began 
in 2003, and after much legal 
maneuvering, District Court 
Judge Dale Kimball ruled in 
August 2007 that Novell 
retained the copyright to Unix. 
In November 2008, Novell was 
granted an award of US$2.5 
million, which was increased by 
$918,122, plus $489 per day 
after Aug. 29, 2008. 

SCO also has pending Unix 
lawsuits against IBM and Red 
Hat. I 



Intel builds on C++ 



< continued from page 1 

with the Intel Threading Build- 
ing Blocks C++ template library, 
a main piece of Intel Parallel 
Studio, is similar to the Cilk+ + 
platform, according to Reinders. 
Intel will integrate Cilk++ into 
its C and C++ compilers. 

"It might change a little 
from what Cilk++ looks like 
today," Reinders said. "There 
may be some enhancements 
that we come up with, but by 
and large, we're very happy 
with the approach they took 
and really happy to have their 
people on board." 

Reinders added that Intel's 
compilers offer an "obvious" 
way to get the Cilk++ technolo- 
gy into the marketplace. 

Cilk+ + and Threading Build- 
ing Blocks carry out many of the 
same functions for writing soft- 
ware programs, but Threading 
Building Blocks can be used on 
any C++ compiler, along with 
any processor or operating sys- 
tem. Meanwhile, Cilk++ adds 
new keywords to the C++ lan- 
guage and is easier to teach and 
understand, according to Rein- 
ders. Teaching Intel's compilers 
to use Cilk++'s simpler syntax 
can let programmers do more 
sophisticated tasks around paral- 
lelism, he said. 

The biggest difference bet- 
ween Cilk++ and RapidMind, 



he said, is that RapidMind's 
technology focuses on data par- 
allelism, which consists of any 
programming that involves pro- 
cessing a lot of data. That could 
include scientific calculations, 
processing images, seismic data 
and other forms of data. 

"If you specialize in only the 
data parallelism problem, you 
can do some pretty cool things 
with it," Reinders said. "You can 
get great scaling and good relia- 
bility in your code. One of the 
things that's unique about 
RapidMind's technology is [if] 
you write a program and run it 
on a machine that has SSE 
[Streaming SIMD Extensions] 
instructions on it, it can take 
advantage of those. 

"That's a pretty powerful 
concept when you're trying to 
process a lot of data, the fact 
that when your program runs, it 
will be able to take advantage of 
whatever hardware happens to 
be on your machine and spread 
that data parallelism out." 

Intel will combine Rapid- 
Mind's technology with its Ct 
research project, which is 
focused on easing the exploita- 
tion of its multicore chips. 
Reinders said that Ct is almost 
identical to what RapidMind 
does in data parallelism, so all 
technology and staff between 
the two will be merged. I 
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It's AH in 



BY DAVID RUBINSTEIN 



Mi 



icrosoft's SharePoint Server 
is many things to many peo- 
ple. Its an office collabora- 
tion platform. Its a portal into corpo- 
rate data. It's a content management 
system. And for software developers, 
it's a new application infrastructure. 

SharePoint comes with most of the 
components needed to create line-of- 
business applications, including Web 
parts, lists, workflows and more. So 
the question for organizations is: 
When do you bring in developers? Are 
they merely customizing these fea- 
tures, adding some small piece of 
functionality, or doing full-blown 
application development with Share- 
Point as the underlying infrastructure? 

The answer, of course, lies in the 
needs of the organization, as well as 
with the expertise of the IT staff. 

"Because SharePoint offers so 
many options, there's a lot you can do 
before you even start with develop- 
ers," said Chris Keyser, Microsoft pro- 
gram manager for patterns and prac- 
tices for SharePoint guidance. Keyser 
said a lot of Microsoft customers are 
still just getting a feel for SharePoint 
and are only working around its edges. 

"Building Web parts, changing a 
workflow... these are things you can 
do with a limited understanding of the 
platform. Getting into custom lists, 
event and feature receivers, things 
like that, the more you need to know," 
he said. 

While SharePoint might be foreign 
to the information workers who are 
learning to assemble business applica- 
tions from these out-of-the-box and 
custom components, the architecture 
should be immediately recognizable to 
Microsoft developers. 

"If you're coming in from .NET, con- 
cepts like master pages and Web parts 
are familiar," Keyser said. "You can get 
moving quickly. At some point, depend- 
ing upon how far you want to go, there 
are some good resources out there." 

He pointed to MSDN as an 
onramp for .NET developers moving 
to SharePoint. "You should under- 



stand how features work in Share- 
Point, how solution packages work in 
SharePoint..." 

After the decision is reached to cus- 
tomize SharePoint or build out entire- 
ly new applications, putting in place a 
good set of practices is critical, as it 
would be for any new development 
work, Keyser said. 

"You should think early about 
putting in source management [and] 
testing, and consider how it will be 
deployed," he said. "Sometimes we 
see patterns where business users get 
excited and want to do their own thing 
with SharePoint. It's like the old days 
of [Visual Basic]. The departmental 
guys crank things out, and you end up 
with lots of things deployed with no 
source control. You need governance 
mechanisms in place to control devel- 
oped assets and how sites grow." 

MODULAR THINKING 

Yet as familiar as the concepts might 
be to developers, SharePoint applica- 
tion development is modularized, 
which forces developers to think in 
new ways, according to Mike Fitzmau- 
rice, vice president of product tech- 
nology at Nintex, who formerly was 
responsible for developer evangelism 
efforts at Microsoft. 

One of the underlying intentions of 
SharePoint, Fitzmaurice said, is a drive 
toward declarative development and 
component development. "SharePoint 
facilitates declarative development," 
he said. "Declare a form, get a Web 
application. Declare a data source, get 
Web parts. Declare a spreadsheet 
model, get a Web service. Create fea- 
ture definitions and site definitions. It 
takes a different set of skills." 

Beyond that, SharePoint almost 
forces developers to look at the UI as 
a set of modules rather than as a page, 
said Robert Bogue, a SharePoint Most 
Valuable Professional who owns the 
consulting company Thor Projects. 

"Everyone understands modular- 
ization, but few developers do it," he 
said. "Corporate developers don't tend 
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to break their pages down. We talk to 
them about the idea of breaking pages 
into controls. They need to think of a 
modularized UI." 

FOR THE END USER 

Perhaps most importantly, developers 
must understand that SharePoint was 
designed to give end users a lot of 
power in assembling applications from 
the controls and components develop- 
ers create. It's a change in thinking 
from other platforms, where develop- 
ers create a complete application, 
even if they are assembled from 
reusable components. 

"SharePoint was designed to 
make that the end user's job,' 
Fitzmaurice said. "But [an end 
user] can't instance an applica- 
tion or a site without a lot of 
good developers doing work 
staging the components. 
Application assembly is best 
when developers arm the 
people doing that." 

But end-user control creates anoth- 
er set of problems, Bogue noted. 
"Developers are used to having con- 
trol over their data structure configu- 
rations," he said. "But using Share- 
Point data structures, users can 
change them, because data is stored 
in lists and not database tables. 
Users can change the structure of 
data without the developer's 
knowledge. They can add a field, 
or just as easily add a workflow, in 
ways the code won't know. It's a dif- 
ferent way of thinking." 

Scott Gode, vice president of 
product management at SharePoint 
service provider Azaleos, cited a study 
that indicated that SharePoint users 
felt application design and mainte- 
nance were big problems. "I interpret 
that to mean it's a combination of the 
UI and the underlying architecture of 
how the application interfaces with a 
SharePoint back end," he said. 

Because of this, he said, many orga- 
nizations tend to use SharePoint for 
what Microsoft and an army of consul- 



tants say to use it for — collaboration 
and document management. "I think 
people haven't gotten to the stage yet 
where they're looking to get overly 
creative with it." 

Fitzmaurice agreed. "Develop- 
ers can create components 
and go with the flow, 
or they can fight _^m^ 



ment to get it to behave in different 
ways. If a business requirement 
demands that, more power to them. I 
generally weigh in on the side of going 
with the flow" 

SharePoint, and other portal plat- 
forms, are nudging people toward the 



idea of modularizing the interface. But 
Bogue doesn't see a lot of movement 
in that direction. 

"Developers are overwhelmed with 
what they have to do and don't have 
time to realize the ground is moving 
under their feet." I 
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FROM THE EDITORS 

The Cloud Wars are 
just beginning 

We've already declared that Amazon won the race for cloud 1.0. But 
two major news items from August are the first, to our minds, that 
show there are other competitors seriously looking for roads toward 
cloud profitability. The news: The purchase of SpringSource by VMware, 
and the release of Cloud Tools from Rackspace Hosting. 

VMware, until its purchase of SpringSource, had been a company all 
about virtualization, primarily in data centers, but also with a strong pres- 
ence in its legacy desktop niche. The company made headlines with a 
messy divorce from its founders; this slowed the company's growth for 
the first half of this year, as new executives and researchers struggled to 
come to grips with their new duties. One could say that VMware spent 
the first half of the year retrenching and regrouping. 

By purchasing SpringSource, VMware has made one of the most 
strategically savvy moves in its history. SpringSource, with its ownership 
of the Spring framework and of the leading Apache Tomcat training 
company, holds sway over very popular and successful enterprise Java 
technology. VMware is aiming for a future without operating systems, 
and SpringS ource's resources make it a force with which to be reckoned. 
By marrying virtualization, the Cloud and Java, VMware is doing an end- 
run around Microsoft, IBM and everyone else. 

Rackspace, on the other hand, didn't have as strong a technology foot- 
ing. Its cloud APIs were anemic, especially when compared to the 
mighty Amazon. But instead of building out its own world of half-baked 
bits and almost-as-good alternatives, the company let third-party part- 
ners build those tools instead. It's a smart move, and by moving beyond 
"not invented here," Rackspace has the potential to overpower and per- 
haps outgun Amazon's development team. 

It's time for Amazon to start checking its rear-view mirror, because 
those dots on the horizon are starting to get bigger at an alarming rate. 

Open source, open for business 

If you believe that the biggest open-source projects are principally dri- 
ven by altruistic volunteers, we've got a bridge in Brooklyn to sell 
you — or rather, give you free of charge, with paid support. 

There are two types of open-source projects. There are projects that 
are managed principally by volunteer enthusiasts, giving of their own 
time without any type of business backing them up. And there are those 
that are supported by corporations, thanks to financial underwriting or 
by "donating" the time of their staff programmers. 

There is nothing wrong with either model. "Corporate" open-source is 
largely responsible for many successful initiatives, such as Eclipse and 
NetBeans, OpenOffice, Moblin, and Linux. 

Yes, Linux. While Linux began as a volunteer enthusiast project, and 
is widely seen as non-corporate, the reality is that many Linux contribu- 
tions today come from corporations. Red Hat, for example, contributed 
more than 12% of recent changes to the Linux kernel. IBM and Intel 
together offered up about 15%. Nearly 70% of Linux kernel develop- 
ment is performed by developers being paid for their time. 

Again, we hasten to say that there's nothing wrong with that model. 
While consumers and enterprise customers are tremendous beneficia- 
ries of free software, the biggest winners are arguably those companies 
footing the bill for those open-source projects. Open source allows them 
to collaborate to create core software assets, driving down costs and 
improving product quality, which benefits everyone. 

Yes, many projects started as unpaid collaborations continue to be true 
volunteer efforts. However, let's not delude ourselves: Much of open- 
source software is a product, created by for-profit companies, as a way to 
drive profits. It's not about freedom, it's about business. I 



LETTERS TO THE EDITOR 

Indefinite growth 
is physically impossible 



Just one minor comment regarding a 
recent article ("The Anti-Social regime 
in Enterprise IT," July 15): 

Overall, I like the article and agree 
with many of the authors conclusions. 
However, one of his premises is highly 
suspect. 

The author, Miko Matsamura, claims 
the existence of four exponential growth 
curves: 

(a) Human population 

(b) Bandwidth 

(c) Memory RAM 

(d) Moore's Law 

Actually, none of those can be truly 
exponential over the long run. It is a 
simple mathematical fact. As long as it 
requires some bit of mass to record a bit 
of memory (e.g. one electron), then a 
continued doubling of memory would 
imply that every desktop would end up 
with more electrons than the universe, 
in fairly short order. A clear impossibili- 
ty. And the other growth curves have 
similar arguments against. 

This is not to imply that Intel would 
not like to keep doubling performance. 
After all, that is what sells hardware. 
But that they will be able to do so is 
simply impossible. Recent trends 
towards high multicore counts (e.g. 
Larrabee) are an attempt to get around 
the fact that a single CPU cannot be 
made to continually double in perfor- 
mance. However, even multicore has its 
limits, once the size and power require- 

WHAT DO YOU THINK? 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



ments of those devices exceed a certain 
threshold; users will not longer be able 
to afford them. 

Actually, one could argue that 
Moore's Law is one of the factors that 
killed the mainframes of old and led to 
the desktop revolution. The present fail- 
ure of Moore's Law now leads us back to 
a mainframe-like (centralized) architec- 
ture (e.g. the cloud). 

Great journal by the way 

Roy Fraties 

LOOKING AWAY FROM SUN 

Hubris doesn't begin to describe Sun. 
They were messianic. In 1992, I was a 
true believer. I thought SPARC would 
take over the world. It was an "open" 
platform! It was RISC! 

The scales fell from my eyes when 
Sun killed off Solbourne Computer by 
raising the license fees. Yes... SPARC was 
only open as long as no one threatened 
Sun's revenue stream. 

I crossed over to Microsoft technolo- 
gies and never looked back. 

Bob Rundle 



CORRECTION 

A photo in the Aug. 15 
special report ("Hitting 
the Right Notes in QA") 
misidentified Mark Eshel- 
by, director of product 
management for Micro 
Focus, pictured here. 




Mark Eshelby 



CLARIFICATION 

In Andrew Binstock's Aug. 1 column 
("Writing portable JVM code. No, real- 
ly!"), the website where Andrew got the 
Javadoc for Ant files was omitted. The 
website is www.j aj akarta.org/ant/ant- 1.6.1/ 
docs/ja/manual/api/index.html. 



Static analysis 

seen as key part of security 



DATA WATCH 




38% re P° rted US N static application 

code analyzers in their organizations. 



17% re P° rted P |ans or initiatives 
under way to use static 
analyzers in the future. 



Thirty-eight percent of organizations use static application code analyzers as part 
of their security infrastructure, according to new research figures from independent 
research firm ThelnfoPro. ThelnfoPro surveyed 246 security professionals at 
organizations in North America and Europe. source: ThelnfoPro 
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So you want to use the HOPE Method 



When you step onto an airplane, you 
hope it will not crash. You, 
as a passenger, have no control over 
what happens during the flight. Statistics 
indicate flying is relatively safe, which is 
due to vehicle mechanics, pilot training 
and competence, flight crew and tower 
teamwork, and substantial planning. 

Purchasing a lottery ticket or a spin 
on a roulette wheel is all about luck and 
hope, with little possibility of influenc- 
ing the outcome. Sure, it is possible to 
purchase more lottery tickets or to buy 
more spots on the wheel for another 
spin, but the outcome is only incremen- 
tally improved. Why, then, do we so 
often see the HOPE method used in 
software project management? 

The use of HOPE often starts at the 
beginning of the project, with Hurriedly 
Overlooked Project Extent (HOPE). 
The project manager will not know 
exactly what is to be delivered or how to 
go about doing it. The project manager 
will spend little time asking questions of 
the customer, never qualifying what is to 
be delivered or what constitutes good 
quality for the deliverable item. At best, 
any discussion will be around the very 
highest of levels of abstraction. We hope 
we got the full scope. This will have an 
impact when we estimate the project. 

After the project manager spends his 
modicum of time understanding the tar- 
gets of the project, he will transfer this 
knowledge to the project team. The 
HOPE project manager takes the team 
that is handed to him instead of identify- 
ing the resources needed. 

EXPECTATION HOPE 

Once the team is assembled, the HOPE 
practitioner will let the project team 
magically know the demands upon them 
via Halfhearted Orientation to Project 
Expectations (HOPE). Here we neglect 
to identify of the areas of responsibility 
for delivering the project. The PM will 
not spend time identifying what consti- 
tutes success or how the team member 
contributions will be measured — no 
need for a resource allocation matrix or 
some other way of defining team roles. 
If all are accountable, then none are 
accountable. 

With HOPE, there is no need for 
communications plans or project 
reviews. These just cloud the air like a 
bad odor. With HOPE, those key com- 
munications channels are self-identify- 
ing and develop on their own. People 
or groups of people depending upon 
information from other parts of the 
project get the needed information, 
without any work or coordination 
required. 

ESTIMATION HOPE 

With Highly Optimistic Project Estima- 
tion (HOPE), there is no need to review 



how other projects were executed in the 
past. With HOPE, we do not have to go 
through the due diligence of developing 
a schedule based on past performance. 
We can eliminate duration estimates 
from the team and get them from our 
individual expert or line manager, or 
better still, the project manager should 




set the durations. We can treat the dura- 
tion estimates as a single-point source, 
no matter how much risk is associated 
with the task or how the task impacts 
subsequent, dependent tasks. It is best 
not to even recognize dependencies. 

CONTINGENCY HOPE 

Hands-Off Prevention Effort (HOPE) 
comes to the rescue. With HOPE, we 
can take only a cursory look at the risks 
and impediments to the project success. 
We may identify some very high-level 
catastrophic risks. However, these risks 
may not be very probable. 

We will not generate backup plans 
nor will we make sure the team is able to 
identify a symptom of a risk that has 
come to fruition. Wearing our HOPE 
armor, we can sit on our fannies until 
heavy-duty effort is required to solve the 
problem. 

We will not respond when a team 
member brings a risk our way. We will 
summarily dismiss the input as rumors 
or hearsay. We choose to be reactive 
instead of understanding what could go 
wrong and develop a plan for handling 
the risk should it come to bear. 

CONTROL HOPE 

The application of Hope Other People 
Excel (HOPE) to project execution and 
control typically begins with the previ- 
ously mentioned abdication or defer- 
ment of responsibility. Hope relies upon 
the project team to deliver. The project 
manager becomes a hermit in a remote 
office and only emerges when there is 
pressure from the project team or from 
upper management. 

There will be few, if any, project 
reviews or project team meetings, and 
the ones that do occur will usually be the 
result of ignoring a small problem until 
it becomes a fiasco. Generally, we mark 
our schedule (if we have a schedule) 
with a line item labeled "...and here a 
miracle occurs." 



COMMUNICATION HOPE 

Management may use doublespeak. It is 
not necessary to practice Hide/Obfus- 
cate Project Errors (HOPE) project 
management to use this technique. This 
technique makes it possible to downplay 
the severity of a problem and ignore its 
root cause. It is hard to say if this is a 
function of self-preservation or if this is 
indeed an overly optimistic perspective. 
However, in this mode, problems will 
not be called problems but, rather, 
"challenges" or "opportunities." 

When a problem is spoken of, it will 
be due to a non-team member getting 
frustrated or an unpredictable risk 
coming to fruition, with someone say- 
ing, "We could never have foreseen 
such a condition happening to our pro- 
ject." Those who earlier predicted an 
issue would come to fruition we will 
branded as naysayers, hypercritical or 
just plain negative. Their counsel hav- 
ing been disregarded, when the risk 
comes to pass, the people who tried to 
alert the project manager will sarcasti- 
cally say, "If only somebody could have 
predicted this." We choose instead to 
rationalize away those things that are 
amiss by management spin. 

OPPORTUNITY HOPE 

We can employ the Hands-Off Preven- 
tion Effort (HOPE) to eliminate track- 
ing of metrics and avoid monitoring the 
project-development schedule. We can 
delay actions with Hard Options Put at 
the End (HOPE), so that we don't have 
to deal with anything until it grows like 
an ugly cancer, potentially killing the 
host. And, of course, we have Heartless 
and Obstinate Personnel Ecosystem 
(HOPE), driving employee apathy, resis- 
tance and interpersonal futility. Our 
entire team works in a Half-Optimized 
Project Environment (HOPE), redolent 
with procrastination, misunderstandings 
and blundering. 

CONCLUDING HOPE 

The HOPE method of project manage- 
ment eliminates the need for activity 
from the project manager. But HOPE 
project management is not a repeat- 
able method to secure success. We 
think it's better to be HOPE-less than 
to be HOPE-ful. People often misun- 
derstand the story of Pandora's Box: 
When the ills that afflict mankind flew 
from the box, only HOPE remained. 
We shudder. 

Jon M. Quigley and Kim H. Pries are 
principals with Value Transformation 
LLC, a product development training 
and cost improvement organization. 
They are presently working on two 
books to be published in 2010. The first 
book is on SCRUM project management, 
and the second is on product testing. 
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Bridging the database schema schism 



A common challenge for Web appli- 
cations is bridging between v. Old 
and v.New database schemas. A produc- 
tion database doesn't need to be large in 
order to pose a challenge: So long as you 
have several related tables being updat- 
ed constantly, the "transaction" of syn- 
chronizing and cutting over to a new 
schema can cause severe headaches. If, 
heaven forbid, you have to roll back to 
your old schema but maintain the new 
transactions that have applied to your 
new schema. . . well, you don't want to do 
that with hand- written SQL. 

ActiveRecord is best known as the 
object- relational mapping library used 
by Ruby on Rails. However, it is perfect- 
ly possible to use it separately from Rails 
with schemas that do not conform to 
conventions expected by Rails. I recent- 
ly used ActiveRecord and Ruby to create 
a synchronizing bridge between two 
database schemas. 

The fundamental convention in 
ActiveRecord is to map a table in the data- 
base into a Ruby class. These classes 
derive from the Base class in the Active- 
Record module. To connect to the data- 
base, use the Base.establish_connection 
function. The surprising ability at the 
heart of my strategy is that this function 
allows for multiple database connections 
to be open simultaneously. 

So, if you define class OldDB as 




deriving from ActiveRecord, call 
establish_connection with the name of 
your v.Old database, and class NewDB 
with establish_connection receiving the 
name of the v.New database, you're well 
on your way. Declare class Employee_Old 
< OldDB and class Employee_New < 
NewDB, and at runtime you'll have two 
lovely Ruby classes for your 
interactive pleasure. 

Creating such a bridge 
requires a little more typing 
than a Rails enthusiast might 
be used to. You will have to use 
set_table_name and (proba- 
bly) set_primary_key to create 
the fundamental mapping 
of a class to a table. Converse- 
ly, when declaring table rela- 
tionships, you'll likely have to 
add the :class_name and :foreign_key 
symbols. 

Given two table-backed classes, assign- 
ment is as simple as self[column_name 
.to_sym] = other[column_name.to_sym]. 
Being an object-y kind of guy, I put such 
helper functions in a class called Abstract- 
Base derived from ActiveRecord:: Base 
and derived my NewDB and OldDB 
classes from AbstractBase. 

The normal task of defining ActiveRe- 
cord table relations is then extended 
with translation functions. In addition to 
ActiveRecord's belongs_to and has_many 
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types of relations, I defined a 
corresponds_to relationship, which holds 
the version-to-version mapping (e.g., 
Employee_New corresponds_to 

:Employee_Old and vice versa). The 
function to_correspondent() returns a 
new instance of the corresponding table- 
backed class with attributes copied (or 
translated) from the receiver. 

I also wrote a number of 
to_correspondent_cascade( ) 
functions that returned "deep 
copies" of a table, following 
the has_many relationships 
from the initial receiver. I 
didn't attempt to solve the 
general case (detecting cycles 
and marrying join tables), but 
I was pragmatic about getting 
the job done. 
Finally, I wrote a set of functions (and 
tests, of course!) that accomplished the 
specific use cases at hand. It was at this 
point that using ActiveRecord really paid 
off. While a Ruby-based bridge is (much!) 
slower than SQL-based backups and 
restores, it is vastly easier to recognize, log 
and recover from unexpected data or a 
broken constraint. ActiveRecord's search 
features allow you to deal with such sub- 
sets, or subsets whose size is constrained 
for performance or transactional reasons. 
Because the database connection is 
neatly tucked away inside a base class, 
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which can pick up parameters from a 
configuration file, test-driven develop- 
ment of two-way translation is much, 
much easier than a process that involves 
scripting SQL backups and restores. 

The price you pay for this flexibility is 
performance. We had just a few million 
records to move, and synchronizing 
from scratch took about 30 hours with 
MRI essentially consuming one CPU 
core and the hard drive pinging away. 
This was acceptable for us since this was 
a one-time cost, but it wouldn't have 
needed to be a much larger database for 
the magnitude to have justified some 
up-front optimization. 

Unfortunately, IronRuby's support for 
ActiveRecord is not yet comprehensive, 
and I couldn't cobble together the combi- 
nation of database drivers and ActiveRe- 
cord adapters we needed for the task. 
This is an area of active development in 
IronRuby, but support for non- Microsoft 
databases seems to lag behind support for 
SQL Server. (Shocking, I know.) 

Similar solutions could certainly be 
put together with LINQ-supporting lan- 
guages and would probably be easier to 
optimize for performance (given the tools 
and infrastructure available for the CLR), 
but the ease of using an existing library 
such as ActiveRecord and the interactivi- 
ty of Ruby made for a great programming 
experience and a big client win. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 



Better code through reading 



The programming section of Reddit 
occasionally receives posts from 
comp-sci majors and early entrants into 
professional programming who want to 
know about best practices for becoming 
a great developer. One of the consistent 
answers from experienced commenta- 
tors is to read a lot of code. This is excel- 
lent advice because it's the best way for 
novices to see what experts do and to 
become autodidacts in the techniques. 

In the old days, this was difficult to 
do because there was not a lot of code 
available, and what was available was not 
a useful model. Neither TeX's literate 
programming nor gee's twisted innards 
are likely to be what an earnest student 
is looking for. But with the profusion of 
well-written codebases today, code read- 
ing as an efficient means of knowledge 
transfer is now distinctly possible. 

Two codebases I sometimes pore 
over are Tomcat (especially the Catalina 
container) and Cruise Control. Both 
demonstrate clean architecture, design 
and code implementation. I am sure if I 
looked at other code, such as JUnit, I'd 
find additional examples. 

The benefit of this reading, beyond 
mere appreciation, is that I have become 
aware of programming techniques — 



especially Java techniques, in my case — 
for rarely discussed problems. 

For example, at startup, Cruise Con- 
trol reads through certain directories and 
makes a list of all JAR files it encounters. 
It then adds those JARs to its existing 
classpath, so that it can incorporate any 
user plug-ins without bothering the user 
to do more than put the plug- 
in into one of the searched 
directories. This approach is 
elegant and perhaps not the 
one I would have come up 
with. I appreciate the user ori- 
entation of its design; I know 
where to find the implementa- 
tion. I also learned a lot about 
how classloaders interact with 
each other. Not bad for 200 
lines of code, huh? 

For prospective readers of code whose 
base language is C, I can heartily recom- 
mend Diomidis Spinellis' excellent book 
"Code Reading," which delves deeply into 
OSS C codebases, and serves as a very 
effective guide to reading code and know- 
ing what to look for. It is, to my knowl- 
edge, the only book written on the topic. 

The value of reading other coders' 
work is slowly being recognized by prag- 
matists as well. Douglas Crockford, the 



Integration Watch 




inventor of JSON, says in the recent book 
"Coders at Work" that, "One of the things 
I've been pushing is code reading. I think 
that is the most useful thing that a com- 
munity of programmers can do for each 
other — spend time on a regular basis 
reading each other's code." 

This point of view is bringing into the 
mainstream two practices typi- 
cally associated with Extreme 
Programming and agile devel- 
opment, respectively: pair pro- 
gramming and code reviews. 

While pair programming 
remains controversial, code 
reviews are now a modern 
development activity. Consis- 
tent with this, we are seeing 
code review tools coming to 
market, notably CodeCollabo- 
rator from SmartBear Software, and Cru- 
cible from Atlassian. ( SmartBear s free 
book, "Best Kept Secrets of Peer Code 
Reviews," is an insightful and quick read 
for anyone doing code reviews.) 

Perhaps the greatest immediate bene- 
fit from reading code goes to developers 
who reread their own code. I am not talk- 
ing about the quick scan of code that takes 
place before a commit, but reading the 
code in — amazingly — hard copy. I recent- 



ly began this practice at the urging of a fel- 
low programmer and immediately came 
to appreciate its benefits. 

First of all, I simply see things that I 
gloss over on the screen. This is true for all 
content, not just code: Change the view- 
ing format, and new items immediately 
stand out. Secondly, using the formatting 
options in IntelliJ IDEA, I can print easy- 
to-read, color-highlighted listings with 70 
lines per page. I can then place two or 
three sheets beside each other and see the 
entire 200-line class in one sweep. 

By getting rid of the monitor as a port- 
hole into the code, I see the entire code. 
Suddenly, many refactorings and occa- 
sionally even design patterns spring to 
mind. I am looking at the forest and not 
the trees, which leads to different results. 
When I'm at the monitor, many of my 
refactorings consist of rename; extract 
method; and add, encapsulate and 
remove variables. When working from 
paper, I see higher-level opportunities: 
merging methods, extracting classes and 
so forth. My code is far better for it. 

So, if you want to improve your code, 
read others' work, then reread your own. 
If you do both, you'll find code reviews 
of your contributions to be far more 
enjoyable. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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No Internet 

better 

than slow 

As consumers, we're spoiled by high- 
speed Internet. As developers and 
IT professionals, we must not be. 

As I write this, I'm sitting in a hotel 
room. The Internet connection here is so 
slow that it's faster to do e-mail on my 3G 
phone than to try to use our company's 
Outlook Web Services portal via a laptop 
browser and WiFi. 
Watching websites 
load on the overbur- 
dened hotel access 
is painful. While the 
wireless signal itself 
is strong, the hotel 
just didn't buy a fast 
enough link to its 
ISP. 

I remember a 
thread on Facebook a few weeks ago, 
where some friends were wondering 
which is worse: no Internet or bad Inter- 
net. It's a tossup. At least if there's no sig- 
nal, you'll go someplace else that has a 
better connection. If there is a bad signal, 
you'll waste incredible amounts of time 
watching pages load, one pixel at a time. 
Let me ask you: When was the last 
time you — and your development 
team — attempted to use your company's 
public-facing Web resources via a slow 
communications link? Have you tried to 
browse your sites from a busy coffee 
shop? Forget about modems, I'm talking 
about the overburdened links that you'll 
get at the Los Angeles Convention Cen- 
ter, at Starbucks, at a Hyatt. 

What about your intranet resources? 
Perhaps your organization uses a VPN, 
or perhaps you have a secured Web por- 
tal protected by SSL and digital certifi- 
cates. Does your team have the respon- 
sibility for creating and maintaining 
those resources? If you only access them 
via your internal LAN, with its Gigabit 
Ethernet to the desktop and 10-Gig 
switched backplane, then you have 
absolutely no idea what's going on the 
real world. 

Some of those remote problems, of 
course, are beyond your control. If the 
broadband is intermittent, there's noth- 
ing you can do. However, do you sniff 
out the bandwidth to the client, and if 
it's limited, suppress the loading of fancy 
graphics? Do you give users the option 
to view a non-Flash version of 
resources? Do you do any planning for a 
non-T3 client? 

If not, get to work and get it done, 
before the next person asking about that 
is your CEO, calling from a hotel room 
in Minneapolis. I 
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MY COLLEAGUE JEFF FEINMAN just 
published a story about new Intel paral- 
lel programming tools. In it, he men- 
tioned that Intel bought out RapidMind, 
which also helps scale applications run- 
ning on many core processors. 

RapidMind was a stand out at some 
of the trade shows that I attended. It 
produces software that creates layers of 
abstraction intended to make parallel 
programming across a variety of proces- 
sors easier. 

It was not tied to Intel technology, 
and it is my sincere hope that it stays 
that way. One of RapidMind's biggest 
selling points was that it was an alterna- 
tive to vendor tools and SDKs that may 
lock developers into a specific hardware 
platform. — David Worthington 

I'VE BECOME A FAN OF MATE. 

After years of learning that coffee and 

my digestive system are metaphorically 

similar to the Sri , ..:■• ■> . 

Lankan military and j$> 

the Tamil rebels, I'd I 

resigned myself to j 

drinking tea. While 

tea is terrific stuff, jjfjL 

and marvelous after 

you've returned from an interstellar 

journey armed only with a towel, about 

half of all teas seem to be decaffeinated. 

That means hitting up a conference 
can sometimes leave me with no caf- 
feine. Not that mate has become a com- 
mon substitute, but San Francisco is a 
multi-cultural town, and I've had a few 
cups of mate hot, cold, and as soda. And 
I must say, I am won over. 

It's definitely as powerful as coffee, 
but without the nasty bitterness. And it's 
just as tasty as tea, but takes to other 
beverages quite well. One of my friends 



at NoiseBridge, Miloh, has done a great 
service to the San Francisco hacker 
community by brewing his own 
ginger/lemon mate soda. It's terrific 
when you're trying to code or write 
something and your brain wants to 
check out for the day. — Alex Handy 
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LAST WEEKEND was move-in day at 
Stony Brook University, where my oldest 
child is a sophomore. Her moment of 
greatest excitement came 
when she learned 
dorms have wireless 
Internet. But 
following the 
steps to register 
her laptop with the universi- 
ty IT administrators, and then to actually 
get on the network, was an all-day affair. 

First, you had to download software 
that scanned her machine to ensure it 
was secure and had all the latest updates 
for her Microsoft Vista operating system. 
Of course, my daughter hadn't done 
ANY of the updates, so hours later, SP 2 
was finally installed, along with other 
updates of her anti-virus software and 
Internet Explorer. After several comput- 
er restarts, the university was finally sat- 
isfied that the machine would not cor- 
rupt the network or be corrupted. 

Then came registration. Easy 
enough: fill out a form or two, and voila, 
we were on the university intranet — but 
couldn't get onto the Internet. Disgust- 
ed, dripping with sweat after five hours 
in a non-air conditioned dorm room, we 
tried one last step, and somehow, we got 
onto the Internet. 

Is it all for research? The furtherance 
of her education? No. She's thrilled 
because now, she's back on Facebook 
and ooVoo. — David Rubinstein 
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ESC Boston 

Boston 
TECHINSIGHTS 

esc-boston.techinsightsevents.com 



Sept. 21-24 



Intel Developer Forum Sept. 22-24 

San Francisco 
INTEL 

www.intel.com/idf 

Software Business 2009 Sept. 29-30 

San Diego 

WEBC0M COMMUNICATIONS 

www.softwarebusinessonline.com 

XML-in-Practice 2009 Sept. 30-0ct. 1 

Washington, D.C. 
IDEALLIANCE 

www.idealliance.org 



ZapForum/Practical 


Oct. 1-0ct. 2 


S0A & EA 




Washington, D.C. 




ZAPTHINK 




zapthink.com/events.html 




Hadoop World 


Oct. 2 


New York 




CL0UDERA 




www.cloudera.com/hadoop-world-nyc 




Adobe MAX 


Oct. 4-7 


Los Angeles 




ADOBE 




max.adobe.com 




VSLive Orlando 


Oct. 4-7 


Orlando 
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vslive.com 




Oracle OpenWorld 


Oct. 11-15 


San Francisco 




ORACLE 




www.oracle.com/us/openworld 




Zend/PHP Conf. 


Oct. 19-22 


San Jose 




ZEND TECHNOLOGIES 




www.zendcon.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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NOVELL REVENUE DIPS IN 
THIRD QUARTER; INCOME UP 

Though overall revenue was down from last year for 
Novell, the company's net income increased, and 
Linux earnings fared somewhat better than the 
same quarter a year ago. 

Novell reported net revenue of US$216 million 
for the third fiscal quarter of 2009 ended July 31. 
This compares to net revenue of $245 million for the 
third fiscal quarter of 2008. Net income in the third 
fiscal quarter of 2009 was $17 million, compared to 
a net loss of $15 million for the third fiscal quarter of 
2008. Additionally, Novell reported $40 million of 
product revenue from Open Platform Solutions, $38 
million of which was from Linux products, up 22% 
compared to the product revenue from the Linux 
products from the same period last year. 

Dana Russell, CFO for Novell, said that total Lin- 
ux invoicing for the year to date was $39 million, 
down 24% on a year-over-year basis. 



EARNINGS: Hewlett-Packard announced revenue of US$27.5 billion for its third 
fiscal quarter ending July 31, down 2% from the same quarter a year earlier and 
a slight increase from the $27.4 billion reported in the second fiscal quarter of this 
year. Net earnings were $2.2 billion, remaining the same from the year before. HP 
Software revenue declined 22% to $847 million, while business technology opti- 
mization declined by 22%. Revenue grew 8% in the Americas to $12.6 billion and 
declined 12% in Europe, the Middle East and Africa to $9.9 billion . . . Applica- 
tion platform and business and process integration company Magic Software 
reported second fiscal quarter 2009 revenue of US$13,595 million, a drop from 
$13.77 million in the first quarter of this year and $16.03 million from the second 
quarter of 2008. Net income for the second quarter was $1.1 million, up from 
$0.7 million in the first quarter of 2009. Net income for the first half of 2009, 
meanwhile, was $1.8 million, up from $1.7 million in the first half of 2008. Addi- 
tionally, cash flow from operations for the first half of 2009 amounted to $4.7 
million . . . Salesforce.com reported revenue of US$316.1 million for its second 
fiscal quarter of 2009, an increase of 20% on a year-over-year basis. Cash from 
operations for the second quarter was approximately $45.9 million, down 14% 
year-over-year. Total cash, cash equivalents and marketable securities finished 
the quarter at approximately $1.03 billion, an increase of $207 million from the 
year prior. Meanwhile, revenue for the company's third fiscal quarter is project- 
ed to be in the range of $323 million to $324 million. I 
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See it all in Studio Enterprise 

Revealing the most styled, supercharged, and easiest-to-uss 
custom Microsoft Visual Studio controls on the market 

* Industrial strength Silverlight 3 controls 

* Growing WPF control suite paralleling our a 
extensive li ne of Silver I ight controls m 

■ Brand new i Phone-styled controls for 
cutting-edge Web dev 

* Award-winning controls for WinForrns, 
ASP.NET; Mobile, and ActiveX platforms 
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ComponentOne' 



Studio Enterprise 2009v2 

WinForrns • WPF • ASP.NET • Silverlight • iPho 
GET STARTED TODAY • DOWNLOAD YOUR FREE TRIAL @ 

www.componentone.com/amazingapps 



ComponentOne Sales: 1 .800.858.2739 or 1 .41 2.681 .4343 
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Dund 

Data Visualization 
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Fully Optimized For Visual Studio 2008! 

With new releases always in the pipe - including exciting .NET add-ons like our new Silverlight extension - Dundas gives you even more reasons to 
build effective custom dashboard solutions. 

As the leader in data visualization solutions for .NET, SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest 
award-winning chart, gauge, map and calendar technologies. Now you know why Fortune 500 companies around the globe trust Dundas to create 
sophisticated and visually compelling dashboard components. 

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge, Map and 
Calendar from www.dundas.com/downloads . 
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Partner 
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